ClearPathSecurity @ClearPathSec

Joined June 2026

Tweets

512
Followers

2
Following

41
Likes

192

ClearPathSecurity @ClearPathSec

10 hours ago

7/ Full breakdown in the article, link in replies. #CyberSecurity #MITREATTCK clearpathsecurity.co.uk/measuring-dete…

0 0 0 0 0

View Details

ClearPathSecurity @ClearPathSec

10 hours ago

6/ Prioritise gaps by business relevance. Identity compromise, persistence, and lateral movement are often better starting points than niche techniques. #NCSC

1 0 0 1 0

View Details

ClearPathSecurity @ClearPathSec

10 hours ago

How do you know whether your detections really cover the techniques that matter? A busy SIEM is not the same as real coverage. #CyberSecurity #NCSC

2 0 1 7 0

View Details

ClearPathSecurity @ClearPathSec

23 hours ago

Quick coverage check: for each ATT&CK technique, record one of four states, not covered, visible only, partially detected, validated. If you cannot point to the log source and the test evidence, do not mark it as covered. #BlueTeam #MITREATTACK

0 0 0 2 0

View Details

ClearPathSecurity @ClearPathSec

a day ago

In SME environments, what blocks Zero Trust most often, legacy apps, weak identity controls, or lack of device visibility?

0 0 0 0 0

View Details

ClearPathSecurity @ClearPathSec

3 days ago

Endpoint security for SMEs should be judged on coverage, context, and response. If you cannot see which devices are protected, what they are doing, and how to isolate one quickly, the tool may not be enough. #CyberSecurityUK clearpathsecurity.co.uk/endpoint-secur…...

0 0 1 3 0

View Details

ClearPathSecurity @ClearPathSec

4 days ago

Use digest pinning in deployment manifests, then verify the Cosign signature against the expected issuer and workflow before promotion. If the tag changes later, the digest check still points to the exact artefact. #DevSecOps

0 0 1 2 0

View Details

ClearPathSecurity @ClearPathSec

6 days ago

For Sentinel detections, what gives you the most trouble, noisy telemetry, unclear thresholds, or keeping ATT&CK mappings current?

0 0 1 4 0

View Details

ClearPathSecurity @ClearPathSec

a week ago

What is your best low-noise detection for PowerShell or WMI abuse in a mixed admin environment? #InfoSec

0 0 1 5 0

View Details

ClearPathSecurity @ClearPathSec

a week ago

AI security for SMEs starts with control, not novelty. Map the data flow, restrict tool permissions, protect retrieval data, and test for prompt injection after each material change. #CyberSecurity #NCSC clearpathsecurity.co.uk/secure-develop…...

0 0 1 4 0

View Details

ClearPathSecurity @ClearPathSec

a week ago

A detection that nobody trusts is close to useless. Start with a clear hypothesis, the telemetry you actually have, and a plan for validation. #CyberSecurity #BlueTeam clearpathsecurity.co.uk/detection-engi…...

0 0 1 7 0

View Details

ClearPathSecurity @ClearPathSec

a week ago

Full breakdown in the article, link in replies. #CyberSecurity #GRC clearpathsecurity.co.uk/secure-softwar…

0 0 1 46 0

View Details

ClearPathSecurity @ClearPathSec

a week ago

6/ For higher-risk tools, ask for an SBOM or equivalent component list, support periods, and data return or deletion terms. Exit planning is part of procurement. #CyberSecurity #NCSC

1 0 1 46 0

View Details

ClearPathSecurity @ClearPathSec

a week ago

Software procurement is a security decision, not just a buying decision. If you only compare features and price, you can miss support gaps, weak access control, or poor patching commitments. #CyberSecurity #GRC